This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91508C4/532FDCDC3E1111EBAE00216CC4F9AE02/rSHpWiYaLoAl4zypVIJcFHCzt6M.mft File: rSHpWiYaLoAl4zypVIJcFHCzt6M.mft (raw, json) Hash identifier: fCviISq/w4/n0RbxpGSqgVG3waKQK5ezfW9u1WMB5OI= Subject key identifier: 31:81:1D:C2:1F:CF:61:B9:BF:48:39:13:BD:80:21:04:A6:F5:8D:2E Authority key identifier: AD:21:E9:5A:26:1A:2E:80:25:E3:3C:A9:54:82:5C:14:70:B3:B7:A3 Certificate issuer: /CN=A91508C4/serialNumber=AD21E95A261A2E8025E33CA954825C1470B3B7A3 Certificate serial: 077E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rSHpWiYaLoAl4zypVIJcFHCzt6M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91508C4/532FDCDC3E1111EBAE00216CC4F9AE02/rSHpWiYaLoAl4zypVIJcFHCzt6M.mft Manifest number: 0778 Signing time: Mon 22 Dec 2025 20:52:44 +0000 Manifest this update: Mon 22 Dec 2025 20:52:43 +0000 Manifest next update: Mon 29 Dec 2025 20:52:43 +0000 Files and hashes: 1: rSHpWiYaLoAl4zypVIJcFHCzt6M.crl (hash: up1vcJmQ1tRKyckl/fiPcG+jjejdVatQjMnNTjygQdw=) 2: B855A21C3E1211EB8D23EB6CC4F9AE02.roa (hash: 7Is3vb8M4Ael/zSFkVaQ0sGxAVtnbAzSio382bs/guQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91508C4/532FDCDC3E1111EBAE00216CC4F9AE02/rSHpWiYaLoAl4zypVIJcFHCzt6M.crl rsync://rpki.apnic.net/member_repository/A91508C4/532FDCDC3E1111EBAE00216CC4F9AE02/rSHpWiYaLoAl4zypVIJcFHCzt6M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rSHpWiYaLoAl4zypVIJcFHCzt6M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 20:52:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1918 (0x77e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91508C4, serialNumber=AD21E95A261A2E8025E33CA954825C1470B3B7A3 Validity Not Before: Dec 22 20:52:43 2025 GMT Not After : Dec 29 20:52:43 2025 GMT Subject: CN=6949af9b-3ca7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:46:ba:8c:df:eb:17:0c:ac:ea:9b:43:64:77: cd:f2:3d:8d:b2:b7:f7:04:e4:50:5c:75:fe:d5:85: dc:1a:ed:6b:96:57:c9:04:f3:f5:38:36:ba:12:d4: 03:78:c7:ce:d6:55:87:2f:f8:25:c0:0f:59:b9:02: 9c:71:3d:37:61:3d:4c:9d:06:4d:8b:b7:67:dd:85: f6:81:05:47:08:3f:f8:c8:59:7c:8f:a1:32:b8:15: 78:1a:26:85:4d:57:bd:82:b0:02:35:b4:68:24:cb: 2b:ac:8a:9e:4e:77:6b:73:60:11:28:8b:77:4f:79: ee:8b:d0:e8:f9:b5:ec:77:26:96:13:f5:d8:bb:93: ae:cc:4f:db:c3:d1:a6:ad:51:43:d2:b4:30:05:9c: 32:3e:c9:79:fa:8f:5c:06:83:30:b0:61:95:6d:f6: e9:29:e6:c2:d6:24:d0:84:01:46:e4:68:8e:9c:62: 4c:f2:9f:ee:76:74:6a:e6:b7:79:07:18:7e:31:6d: fb:3e:3d:99:4f:7d:f2:83:99:c7:37:3c:2f:0e:20: f8:b8:7e:bf:85:ed:34:56:d8:49:a8:0d:7e:09:30: 6e:3d:05:84:b2:c0:51:4e:c4:d8:20:32:f1:5c:e0: 22:ac:36:ec:0e:b5:cc:64:12:1a:95:a1:b8:73:3b: 12:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:81:1D:C2:1F:CF:61:B9:BF:48:39:13:BD:80:21:04:A6:F5:8D:2E X509v3 Authority Key Identifier: keyid:AD:21:E9:5A:26:1A:2E:80:25:E3:3C:A9:54:82:5C:14:70:B3:B7:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91508C4/532FDCDC3E1111EBAE00216CC4F9AE02/rSHpWiYaLoAl4zypVIJcFHCzt6M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rSHpWiYaLoAl4zypVIJcFHCzt6M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91508C4/532FDCDC3E1111EBAE00216CC4F9AE02/rSHpWiYaLoAl4zypVIJcFHCzt6M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:b7:21:c6:88:f8:e8:9d:4d:c2:c8:d1:51:6c:cb:35:8b:bd: 04:51:d1:1a:73:94:0f:69:3b:fd:2c:df:ea:2f:73:4c:e8:96: c6:93:04:9f:2c:4c:7f:47:77:0f:5e:84:3e:1f:87:fe:df:63: 2c:ba:05:26:e5:46:85:90:08:b4:02:4e:9b:cd:9b:38:06:70: 3b:d2:0f:10:63:89:04:48:75:9c:b8:d9:83:b6:95:4d:f3:93: f2:eb:79:d0:16:8a:a5:14:7d:13:f5:c6:af:a2:c5:6e:86:a4: d1:99:8b:a1:46:8d:15:26:e4:e4:af:0f:b0:76:05:89:3d:e0: ae:33:78:65:08:71:79:75:e2:f5:10:e5:f8:b1:13:ca:bd:db: 71:38:e7:5e:9b:3d:e6:7c:84:d9:66:d9:70:ea:dd:ee:0d:5b: d8:df:e1:16:6d:f3:04:68:64:c9:cd:c2:7c:b7:05:67:a5:c0: 49:28:04:46:3d:b1:b8:26:1b:68:ce:3c:5b:c0:55:1a:4d:a2: c2:da:c1:c5:72:98:8e:80:5c:82:5d:61:ce:64:09:57:d0:7a: 4b:67:d6:cb:30:f7:9a:a2:7c:e3:73:b2:f9:e7:2f:72:d9:0f: 58:96:97:c8:04:1a:34:2d:d6:ae:d3:44:d2:9e:ac:82:5a:15: d4:f7:e2:29 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB34wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTA4QzQxMTAvBgNVBAUTKEFEMjFFOTVBMjYxQTJFODAyNUUzM0NBOTU0ODI1QzE0 NzBCM0I3QTMwHhcNMjUxMjIyMjA1MjQzWhcNMjUxMjI5MjA1MjQzWjAYMRYwFAYD VQQDDA02OTQ5YWY5Yi0zY2E3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwka6jN/rFwys6ptDZHfN8j2Nsrf3BORQXHX+1YXcGu1rllfJBPP1ODa6EtQD eMfO1lWHL/glwA9ZuQKccT03YT1MnQZNi7dn3YX2gQVHCD/4yFl8j6EyuBV4GiaF TVe9grACNbRoJMsrrIqeTndrc2ARKIt3T3nui9Do+bXsdyaWE/XYu5OuzE/bw9Gm rVFD0rQwBZwyPsl5+o9cBoMwsGGVbfbpKebC1iTQhAFG5GiOnGJM8p/udnRq5rd5 Bxh+MW37Pj2ZT33yg5nHNzwvDiD4uH6/he00VthJqA1+CTBuPQWEssBRTsTYIDLx XOAirDbsDrXMZBIalaG4czsS2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDGBHcIf z2G5v0g5E72AIQSm9Y0uMB8GA1UdIwQYMBaAFK0h6VomGi6AJeM8qVSCXBRws7ej MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDhDNC81MzJGRENEQzNF MTExMUVCQUUwMDIxNkNDNEY5QUUwMi9yU0hwV2lZYUxvQWw0enlwVklKY0ZIQ3p0 Nk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JTSHBXaVlhTG9BbDR6eXBWSUpjRkhDenQ2TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MDhDNC81MzJGRENEQzNFMTExMUVCQUUwMDIxNkNDNEY5QUUwMi9yU0hwV2lZYUxv QWw0enlwVklKY0ZIQ3p0Nk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAxtyHGiPjonU3CyNFRbMs1i70EUdEac5QPaTv9LN/qL3NM6JbGkwSf LEx/R3cPXoQ+H4f+32MsugUm5UaFkAi0Ak6bzZs4BnA70g8QY4kESHWcuNmDtpVN 85Py63nQFoqlFH0T9cavosVuhqTRmYuhRo0VJuTkrw+wdgWJPeCuM3hlCHF5deL1 EOX4sRPKvdtxOOdemz3mfITZZtlw6t3uDVvY3+EWbfMEaGTJzcJ8twVnpcBJKARG PbG4JhtozjxbwFUaTaLC2sHFcpiOgFyCXWHOZAlX0HpLZ9bLMPeaonzjc7L55y9y 2Q9YlpfIBBo0Ldau00TSnqyCWhXU9+Ip -----END CERTIFICATE-----Generated at Wed Dec 24 14:09:28 2025 by rpki-client